handavid opened a new pull request, #1358: URL: https://github.com/apache/knox/pull/1358
[KNOX-3425](https://issues.apache.org/jira/browse/KNOX-3425) - A short description of the change ## What changes were proposed in this pull request? The LdapProxyBackend.authenticate method will now return false if either the given DN or password is empty to prevent unauthorized and anonymous binds. The UserSearchInterceptor is also updated to not call the backend if the DN or password is empty. ## How was this patch tested? Unit tests added. Manual tests performed using ldapsearch to attempt anonymous bind that previously succeeded ``` ldapsearch -v -x -H ldap://localhost:3890 -b 'ou=people,DC=proxy,DC=com' '(uid=guest*)' '*' ``` ## Integration Tests integration tests were run locally ## UI changes no UI changes -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
